CVE-2006-2298
6.8 Medium
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.066 Low
EPSS
Percentile
93.7%
The Internet Key Exchange version 1 (IKEv1) implementation in the libike library in Solaris 9 and 10 allows remote attackers to cause a denial of service (in.iked daemon crash) via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1.
| CPE | Name | Operator | Version |
|---|---|---|---|
| internet_key_exchange:internet_key_exchange | internet key exchange | eq | 1 |
References
secunia.com/advisories/20050
securitytracker.com/id?1016043
sunsolve.sun.com/search/document.do?assetkey=1-26-102246-1
www.ee.oulu.fi/research/ouspg/protos/testing/c09/isakmp/
www.niscc.gov.uk/niscc/docs/re-20051114-01014.pdf?lang=en
www.securityfocus.com/bid/17902
www.vupen.com/english/advisories/2006/1733
exchange.xforce.ibmcloud.com/vulnerabilities/26311
Related
6.8 Medium
AI Score
Confidence
High
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.066 Low
EPSS
Percentile
93.7%